4b454f9fd6ab1edd11a617d99b2fd7622d94812dbd975747945a4e325b914739 | Triage™

Login
Reports

Overview

overview

3

Static

static

1

Xyro-Hybrid-main.zip

windows10-2004-x64

1

Xyro-Hybrid-main.zip

windows11-ltsc_2024-x64

1

Xyro-Hybri...ts.bat

windows10-2004-x64

3

Xyro-Hybri...ts.bat

windows11-ltsc_2024-x64

3

Xyro-Hybri...ro.bat

windows10-2004-x64

3

Xyro-Hybri...ro.bat

windows11-ltsc_2024-x64

3

Xyro-Hybri...mer.py

windows10-2004-x64

3

Xyro-Hybri...mer.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...ers.py

windows10-2004-x64

3

Xyro-Hybri...ers.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...rpc.py

windows10-2004-x64

3

Xyro-Hybri...rpc.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...ain.py

windows10-2004-x64

3

Xyro-Hybri...ain.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...und.py

windows10-2004-x64

3

Xyro-Hybri...und.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...age.py

windows10-2004-x64

3

Xyro-Hybri...age.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...ges.py

windows10-2004-x64

3

Xyro-Hybri...ges.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...mcp.py

windows10-2004-x64

3

Xyro-Hybri...mcp.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...otd.py

windows10-2004-x64

3

Xyro-Hybri...otd.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...mpp.py

windows10-2004-x64

3

Xyro-Hybri...mpp.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...ics.py

windows10-2004-x64

3

Xyro-Hybri...ics.py

windows11-ltsc_2024-x64

3

Xyro-Hybri...efs.py

windows10-2004-x64

3

Xyro-Hybri...efs.py

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Xyro-Hybrid-main.zip
Size 3.2MB
Sample260810-yrfemaac66
SHA256 4b454f9fd6ab1edd11a617d99b2fd7622d94812dbd975747945a4e325b914739
MD5 cb5c2a2d100337a57266c1f8eed6cc32
SHA1 484c3f7e1008035fa1d1c79bd6d1667a33cc9517
SHA512 f53f7df7de153a914feca9d7e26f4bcd7d23eb152945e9f5fec4522fc0dcd0c050cd6a0ea1e5933700f6cd9e840e3522ea93361a87059954e62db78b0446e865
SSDEEP 49152:ZbdGzcEadBjUqRHn4i79OkMj2wYN5ybjfyeF+hQjc8KCoftnBb:ZbdEcrjUqREj2wqwfjF+oKj
TLSH
T169F533FE707E3C828CD77A72D169C1C9C84018A6D29948A857A1BFED0A0F1B3B58579D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion execution

Static task

static1

Behavioral task

behavioral1

Sample

Xyro-Hybrid-main.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Xyro-Hybrid-main.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Xyro-Hybrid-main/Install Certs.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

Xyro-Hybrid-main/Install Certs.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

Xyro-Hybrid-main/Start Xyro.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

defense_evasion execution

Behavioral task

behavioral6

Sample

Xyro-Hybrid-main/Start Xyro.bat

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

defense_evasion execution

Behavioral task

behavioral7

Sample

Xyro-Hybrid-main/exploits/renamer.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

Xyro-Hybrid-main/exploits/renamer.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

Xyro-Hybrid-main/handlers/filters.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Xyro-Hybrid-main/handlers/filters.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Xyro-Hybrid-main/handlers/rpc.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Xyro-Hybrid-main/handlers/rpc.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

Xyro-Hybrid-main/main.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

Xyro-Hybrid-main/main.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

Xyro-Hybrid-main/modifications/background.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Xyro-Hybrid-main/modifications/background.py

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

Xyro-Hybrid-main/modifications/cloudstorage.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Xyro-Hybrid-main/modifications/cloudstorage.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

Xyro-Hybrid-main/modifications/contentpages.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Xyro-Hybrid-main/modifications/contentpages.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

Xyro-Hybrid-main/modifications/mcp.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

Xyro-Hybrid-main/modifications/mcp.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

Xyro-Hybrid-main/modifications/motd.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

Xyro-Hybrid-main/modifications/motd.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

Xyro-Hybrid-main/modifications/xmpp.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

Xyro-Hybrid-main/modifications/xmpp.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

Xyro-Hybrid-main/utils/cosmetics.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

Xyro-Hybrid-main/utils/cosmetics.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

Xyro-Hybrid-main/utils/defs.py

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

Xyro-Hybrid-main/utils/defs.py

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Xyro-Hybrid-main.zip
- Size 3.2MB
- SHA256 4b454f9fd6ab1edd11a617d99b2fd7622d94812dbd975747945a4e325b914739
- MD5 cb5c2a2d100337a57266c1f8eed6cc32
- SHA1 484c3f7e1008035fa1d1c79bd6d1667a33cc9517
- SHA512 f53f7df7de153a914feca9d7e26f4bcd7d23eb152945e9f5fec4522fc0dcd0c050cd6a0ea1e5933700f6cd9e840e3522ea93361a87059954e62db78b0446e865
- SSDEEP 49152:ZbdGzcEadBjUqRHn4i79OkMj2wYN5ybjfyeF+hQjc8KCoftnBb:ZbdEcrjUqREj2wqwfjF+oKj
- TLSH
  T169F533FE707E3C828CD77A72D169C1C9C84018A6D29948A857A1BFED0A0F1B3B58579D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Xyro-Hybrid-main/Install Certs.bat
- Size 1KB
- SHA256 8ba738c09d9bb5704e4277af3c0ea41bc0b9d2391b65445dd2ee1a4757b9a874
- MD5 d934ba68a19ee2d4e270dc33b870745d
- SHA1 6518cd5ba571b0f7adf19ca73e8d32904407a610
- SHA512 be34205754b52114adda4a21563be03d7718474d10e100587e5c78cb1ad6dcd38f7fe5cab73504c8f450d05ad6098d5fb62c43e27b7544f6c0a1a12f0a0daa5e
- TLSH
  T16F11335AF58068716DA8D331AC4B25E3716A106F46531C28B0DB94B82F0AFE0D6FD1E0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Xyro-Hybrid-main/Start Xyro.bat
- Size 2KB
- SHA256 db751c53aaca4691d0dd534c3d2c24642a953599305295aac5705b0a9226d22f
- MD5 a0be6e78a4b7f02aef9cae7c4f603fec
- SHA1 4ce1fe9c87f5fc6156b3a7bab34a2c08b4d5f0c0
- SHA512 6d8d324834c92cc7f287354bc7363ad7e1c163478a3f8c303ed1c16877449b1ccad3707fbeea4da5bd62b1182a768d4afd4a5f9806b46e526a786bec54dcfb15
- TLSH
  T1EB51FF4E300591711A969A2DDD6910573BA1416F16232DBDF1EFC1AC2F8A3E13AFF192
- MD5 SHA1 SHA512 TLSH
Score

3^/10

defense_evasion execution
behavioral5 behavioral6
- Target
  Xyro-Hybrid-main/exploits/renamer.py
- Size 971B
- SHA256 cb7d595cadf8db6cbc7a0a15f021c5aa7d75b0400e9186fa7e7e99b7a314e8e9
- MD5 03acde624466d7839ffcd9bcb89cffb6
- SHA1 683deda05e0792761a533019cfd006d944fe2a45
- SHA512 601916461b4a2198fb6d5df43f65ddb4d8deb23b501860b7cdf4a1b6405ed8d9bd87d3047bd4cf8c283baeb52a2c14a5e1dd860575d8d8e3b98055cd63f9d0e3
- TLSH
  T16211D016281F0E8347ECCE4CC945E7A7A63097D32747E611BC4C676A6F79D23D12146D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Xyro-Hybrid-main/handlers/filters.py
- Size 997B
- SHA256 caf69609e83f0291b7ec71711efc5092ffd1bba7d28ef95cac92942879987093
- MD5 343f58a88b18ef08c4d7a590ff141e6c
- SHA1 d2c7ce63472fa2c7309d592d30d479376d7c8c5f
- SHA512 64967e83883f590db2ead72dbac730ad0b03a89d10f69d939064a2a27570a0efba6312bf3eabca79802d328e18d4e09a3c24c84a3210e336a6d7098038252bcb
- TLSH
  T13D11CE52AD1AE8529230D32D0847C011F91C2B0396317553B4AF9256FFF401E80F639F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Xyro-Hybrid-main/handlers/rpc.py
- Size 2KB
- SHA256 bb39cdbcc61eef21332b87f9890c26338fd3bd325c15010b2af2899199c7651b
- MD5 6329b26b4444d04f86e8a74f7b661e50
- SHA1 ca3f3734955968902d48e52a8a5ed7c064217966
- SHA512 bceeabb29597687d357e25ecd29a4526a7ed41524e7ae55ffecff6e0e4bb09d83e816790ea8486047038b61b7b0f59bf1e066b7ca68455d2e3953b55c7a5da2e
- TLSH
  T159519B21CC179A1784B3DD2DE82BF363D6160F931A0E050779BC123A5F35625C996CEE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Xyro-Hybrid-main/main.py
- Size 5KB
- SHA256 f267dd1aa4ff770aa0e70bcc13400e95e36a7ce5740dcc9355281d59697aa129
- MD5 a880b38dfee1ece79e51c94f4f958941
- SHA1 238f33265ebc2e9befd055ee1a730d774ce9d3ee
- SHA512 eb750f59f77715b74d5f9a18847dc2b898bcc5837bba0a594f7e221f4d2d8421f44ff8c3e56dbb1994c410dcad558d173f181b83059cefad27543bf020ba2f3a
- SSDEEP 96:msWHjEvn77sFd8ZE0YnEJrQe+iJY/8a+753/21d22HXaL4t4HUG8ra:nFs63XJY/8ag/21YEjjra
- TLSH
  T115B185428D7E680098BBD37D952356A1F72B4B0B2E6F1916B1ECA3281FB8C20C57496D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Xyro-Hybrid-main/modifications/background.py
- Size 2KB
- SHA256 3ba3c89c9d0f1f009c105b81de6ce1e02d9cf789f3c0f5a9dfc869b9241f2a06
- MD5 8c58673652f11807ae77029ca57551bd
- SHA1 65ea8cccf8f9a82f4ceb1b472ad65c4120cd7db1
- SHA512 bc9e21b824841caf0efcf988ad33b797f7793cbb7017f0bda17f0a68c11ae7aa07ebf5352ace6f337ed8de59023d55be82a6c60493d0539ffa388418f5c0ea76
- TLSH
  T19F5123A13E5918672679C53DDAE9FB88F305B64391027E077C1C2BAC2FF0165D27229B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Xyro-Hybrid-main/modifications/cloudstorage.py
- Size 4KB
- SHA256 3736cb03814fe6ec14660964af67ae4450bc32fc7f28f9fee228f44cfea28651
- MD5 520a8a99178e2eae94f0c60049165d65
- SHA1 dc608b3bb8afeb852af04555fda4c88b444c4f5a
- SHA512 f799392655c10f152512b31d4fb713be5fc26c5d5b42300613cd37bbc3d7c05b7cc9582237a70dcd35dbc093303c58043b5a6a8e15598d0591a8ef6747065951
- SSDEEP 96:+HF1e8/7wK2xQw5vVyjzSwKvVPgkgd7Bb:Q1sJYjq6k2lb
- TLSH
  T1A381DE8AC5141CC267AFA2AC9EEA54422320956B5D093C19B9CC375D3FDC62CB1F63ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Xyro-Hybrid-main/modifications/contentpages.py
- Size 1KB
- SHA256 709bc802a62b83efd8baebd9f848c5434bf7b1ccc8d89aeab7c87a3c20a7d814
- MD5 247dd9bddb778f1512bbc42398170de6
- SHA1 19cd835d623550bb76e2c155fc5ff30e58076150
- SHA512 6d04e3251b7425c6cb4da9470c3b9ffd2913d952379d650e1946133c41cd34c30fc2477c8032c2f2592e0f11f30a8b9c281508eb832c1a53e1bd8491fe92c174
- TLSH
  T11121B10DC6322D0A4BE6A29849AD95C9663194234E9C7C11729C072C5FCCD2E44F55AE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Xyro-Hybrid-main/modifications/mcp.py
- Size 11KB
- SHA256 bf8f62874f6b8e144648b7511eeba1a7dbc39282ab5b70c330d1fd680f35f79d
- MD5 2bfe2d8a5abe17571f4394f2bebc644d
- SHA1 3cc4e5eed0f849c34e5e5683ef779ac4949cb97a
- SHA512 b90b21aff4cf4e8c7cba32074d11643d117113254dbafcdf8e472beacc731d0686195c199f0d168408edef16a34f8fb690e450c6278607fa27f3aba56380a1b3
- SSDEEP 192:E+T7RYXbzwMNagyL+3YZynXX6AOqg+Z9+Zj2cZzdb:EYmm+3x9OPo9o5zh
- TLSH
  T105327207D4194863D747791869BAC54A3B303B0B7907682878DE628C1F9E93EE5F13EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Xyro-Hybrid-main/modifications/motd.py
- Size 1KB
- SHA256 f09abcaea09931d2b2ef3f8767f8f4e6a49afca2d25f3d32f2e2ecb1ddacb304
- MD5 0fb8aed62888e848d4f77825255885df
- SHA1 59519eb20c8472aa5e2260e130fca73971ea0dbe
- SHA512 75e30604ae194fac8d5d49197971babe80008cb38d2ff880f8c848a7476a5fe23678205abe7547aaae8838e08b7f2b62d902ad0a2bc1d868e0006fe1616391eb
- TLSH
  T19B41E16AD8B51CA5A38AA56D8CBE9465613440A38E457C19759C232C0F8CD3F05F728E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Xyro-Hybrid-main/modifications/xmpp.py
- Size 1KB
- SHA256 38a2c05ebf53ea36618adc24f3479612ae0cd235014bf55c2e772f08ed714882
- MD5 bd4cea63e3e93a70840ccf49c674fd11
- SHA1 31fdd1acab4c5ee490192f0ffd0c5b3307a862d4
- SHA512 40c7137c02ab976eeb2353ec06c0b327cc84da12f1781afe44e610b29fa4ec658eaf12a932ea0b8edf4b99a41aaf4f2363df753603b1f32d0cbc0b020b14b722
- TLSH
  T164219081552E51A2EF2F52666046B43C72333E133002B675389F03A85FDD6EDC4FA11D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Xyro-Hybrid-main/utils/cosmetics.py
- Size 8KB
- SHA256 c7abfbad838f364ce1c13c1f08976970f1835469181b41e26f2b9d811f050f53
- MD5 7815c8029521ac95e38faab5534b5787
- SHA1 1dd52baf871a9a78115009a686ab688cd4855b6e
- SHA512 8be394d1eff8cd52e9072601c107882656624597d0b0de3d71f4c771f63b935170e69fb8b1666b9b8ad1c5895fca61b719bd806fd3f8476573128751a3a06a0a
- SSDEEP 192:eyT7heykpGNriCceswQQsxNpNEQNh4O9U5swJkdFWs6MSqheSqEXF:eyeGcTPtNBKS9cs6+9F
- TLSH
  T18A029E26D4780DF32966347C947FA6038278D2474E163DA63DCC534D1F4EA2A96B938F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Xyro-Hybrid-main/utils/defs.py
- Size 964B
- SHA256 0c421e16c6de8f8b730f9a6304590d947443439d0c202eadd53a7beea009d11a
- MD5 6c8baefd56d4e6b599c0d7d2223c5e31
- SHA1 6d45f1debe72979126ec55ab0e8d19f9b522a600
- SHA512 ea7ed0c2d5abbd8bf599e37d00f799abdf36235a920534fdf98576d636dd49bb010075c74af98d74924007569e8754662834414223a580d43c638870fa39386c
- TLSH
  T18511CE01D615D852C203F52D489388013B283D17E62569787CEF5395AFEC13BC1FA35E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

defense_evasionexecution

behavioral6

defense_evasionexecution

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

© 2018-2026

Terms | Privacy